Prevent Context Leakage in Multi-Tenant LLM Systems

Two users can ask the same question and be entitled to completely different answers. “Summarize the renewal terms” might refer to a public template, a private contract, or a document shared with only